Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File:                     XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier:          Jl42+R0k7VsPFEJcOMzTRSG7GndvNwuWqkbwDieomO8=
Subject key identifier:   F6:0A:CF:CE:7A:30:42:1E:16:53:FF:4F:84:73:22:81:12:DA:60:07
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer:       /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial:       019EC3DC85CDF1719E7CFFB42BE4FCE237BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number:          083A
Signing time:             Sun 14 Jun 2026 02:01:09 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:09 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:09 +0000
Files and hashes:         1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
                          2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: kssoZiSNDeF7Yw0bqQguAcWAjMiInrycKmiNUnXAJZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:85:cd:f1:71:9e:7c:ff:b4:2b:e4:fc:e2:37:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
        Validity
            Not Before: Jun 14 02:01:09 2026 GMT
            Not After : Jun 15 02:01:09 2026 GMT
        Subject: CN=f60acfce7a30421e1653ff4f8473228112da6007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:98:49:d8:58:7d:ab:ed:4e:58:b7:d7:42:
                    c6:00:99:00:7e:c4:83:f5:14:c0:ee:7d:f8:0c:5c:
                    64:b6:83:bd:25:ca:44:c1:f9:29:1f:3d:c6:86:a6:
                    be:a1:0d:4d:4d:70:c4:22:e7:94:00:d9:b8:95:e7:
                    7a:70:d2:c7:09:a6:30:93:94:bb:b6:97:26:7d:11:
                    47:d9:b2:93:7a:79:e6:66:8c:41:21:f8:e0:1b:d9:
                    0f:09:59:1c:2b:8b:9b:8f:b9:0d:81:c2:f2:68:b8:
                    1e:17:fb:09:e8:37:d7:6f:8f:48:99:d2:54:b9:23:
                    fb:d0:c5:8a:4a:d9:41:c1:84:c6:06:d6:7b:eb:d0:
                    89:be:ca:2f:ab:c9:c9:58:de:b6:f8:44:cc:74:7a:
                    5a:6f:75:f3:29:d0:4c:27:ab:e1:42:d4:d0:31:e5:
                    c1:44:62:10:47:23:ea:4c:c5:09:48:f1:f7:2c:a3:
                    8b:bc:82:18:41:fc:95:ff:db:0a:d6:69:a7:8d:ef:
                    79:c4:fd:40:ba:d8:b1:1a:e6:b3:4c:02:a2:f9:fe:
                    9a:9f:e6:d9:02:57:70:0c:74:e9:03:c8:00:5e:e4:
                    11:f2:83:6b:f8:5a:d5:71:2f:cd:b1:10:eb:d4:30:
                    33:51:99:2b:75:00:dd:ac:83:c8:fc:47:c9:c3:0d:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0A:CF:CE:7A:30:42:1E:16:53:FF:4F:84:73:22:81:12:DA:60:07
            X509v3 Authority Key Identifier:
                keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:5d:7a:cd:b6:b2:26:9d:7d:29:2e:86:1e:eb:a6:42:a1:
         39:48:d1:2b:b3:f0:5b:46:84:30:51:39:64:a8:e3:08:4e:0f:
         38:0a:5c:1e:66:79:dc:b8:0c:a0:ef:e0:72:e0:0d:14:7f:ff:
         e3:37:39:1b:9b:97:95:13:20:0f:a0:dc:35:62:9a:4e:46:e9:
         4f:eb:9a:81:22:03:89:eb:16:74:14:c2:c8:cd:b9:f8:85:a5:
         00:1d:b4:f0:25:0d:b4:30:59:66:d4:f7:95:9d:88:4c:6b:c8:
         9a:d2:69:c1:4c:d5:98:53:ed:d2:fd:40:8d:67:04:10:a2:63:
         6f:d0:1e:2a:3a:50:a2:9e:64:6a:9c:d7:5a:9b:98:33:ac:e2:
         30:6c:f5:8c:0a:88:af:df:cc:e8:8d:37:01:ff:a4:b7:f1:a5:
         c4:ca:20:9f:e6:37:4f:e2:2c:1e:4b:cb:e1:ac:3b:d0:c4:f8:
         79:72:51:b0:54:30:e5:9b:33:64:17:a9:df:35:15:40:a6:49:
         7b:6f:e8:fa:2c:39:ed:b6:2a:73:71:23:86:f2:ef:b6:b6:59:
         c8:b9:0f:2b:79:87:e0:5a:1a:ee:e0:2c:01:a2:b4:03:f3:6a:
         c7:0a:56:7e:99:fd:ff:68:0c:ae:f7:33:1d:e9:4d:78:5d:77:
         0d:97:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:03 2026 by rpki-client